Windows 365 Client Execution
Detects the execution of Windows 365 native clients (Windows365.exe). Threat actors like UNC3753 abuse legitimate VDI clients on compromised BYOD devices to bypass corporate perimeters and access sensitive internal network segments.
YARA-L
